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Constructing bent functions and bent idempotents of 

any possible algebraic degrees 

Chunming Tang, Yanfeng Qi, Zhengchun Zhou, Cuiling Fan 


Abstract 

Bent functions as optimal combinatorial objects are difficult to characterize and construct. In the literature, bent idempotents 
are a special class of bent functions and few constructions have been presented, which are restricted by the degree of finite fields 
and have algebraic degree no more than 4. In this paper, several new infinite families of bent functions are obtained by adding the 
the algebraic combination of linear functions to some known bent functions and their duals are calculated. These bent functions 
contain some previous work on infinite families of bent functions by Mesnager |33jj and Xu et al. ED. Further, infinite families 
of bent idempotents of any possible algebraic degree are constructed from any quadratic bent idempotent. To our knowledge, it is 
the first univariate representation construction of infinite families of bent idempotents over F 2 2 m of algebraic degree between 2 
and m, which solves the open problem on bent idempotents proposed by Carlet E). And an infinite family of anti-self-dual bent 
functions are obtained. The sum of three anti-self-dual bent functions in such a family is also anti-self-dual bent and belongs to 
this family. This solves the open problem proposed by Mesnager ED 

Index Terms 

Bent functions, rotation symmetric functions, bent idempotents, Walsh transform, algebraic degree 


I. Introduction 

Boolean bent functions introduced by Rothaus go) in 1976 are an interesting combinatorial object with the maximum 
Hamming distance to the set of all affine functions. Such functions have been extensively studied because of their important 
applications in cryptograph (stream ciphers (SJ), sequences f36l . graph theory f38l . coding theory ( Reed-Muller codes 1131 . 
two-weight and three-weight linear codes 0, ||T81 ). and association schemes 091 . A complete classification of bent functions 
is still elusive. Further, not only their characterization, but also their generation are challenging problems. Much work on bent 

functions are devoted to the construction of bent functions ei, a, id, ia, on, na, m, hd, oh, oh, eh. eh, eh. 

E3. EZ), ED, ED, EH- ED, EH- EH- EH- 

Idempotents introduced by Filiol and Fontaine in ll20l . lITfl are Boolean functions over F 2 n such that for any x £ F 2 n, 
f(x) = fix 2 ). Rotation symmetric Boolean functions, which was also introduced by Filiol and Fontaine under the name of 
idempotent functions and studied by Pieprzyk and Qu ll37l . are invariant under circular translation of indices. Due to less space 
to be stored and allowing faster computation of the Walsh transform, they are of great interest. They can be obtained from 
idempotents (and vice versa) through the choice of a normal basis of F 2 «. Characterizing and constructing idempotent bent 
functions and rotation symmetric bent functions are difficult and have theoretical and practical interest. In the literature, few 
constructions of bent idempotents have been presented, which are restricted by the degree of finite fields and have algebraic 
degree no more than 4. Carlet 0 introduced an open problem: how to construct classes of bent idempotents over F 2 2 m of 
algebraic degree between 5 and m. 

Bent functions always occurs in pairs. In fact, the dual of a given bent function is also a bent function. Generally, the 
calculation of the dual of a given bent function is difficult. As a subclass of bent functions, self-dual bent functions (resp. 
anti-self-dual bent functions ) coincide with their dual (resp. have a very simple way with their dual). They are interesting and 
can be used to construct new bent functions. Mesnager lf33l proposed an open problem: find three anti-self-dual bent functions 
/i, / 2 , and fs over F 2 2 m such that /i + / 2 + /3 is anti-self-dual bent. 

In this paper, we consider bent functions of the form 

f(x) = g(x) + F(Ti'l(u 1 x),Tr'l(u 2 x), ■ ■ ■ ,Tr”(u r x)), 

where g(x) is some known bent function, n = 2m, r is a positive integer such that 1 < r < to, u\, u 2 , • • • , u T £ F * 2 m, and 
F(X i,X 2 , • • • , X T ) £ F 2 [Xl, X 2 , ■ ■ ■ ,X T }. Mesnager ll33l studied the case that F(X 1 , Y 2 ) = XiX 2 . Xu et al. Il42l studied 
the case F(X 1 , X 2 , X 3 ) = X 1 X 2 X 3 . We consider the general case. First, from some known bent functions, we present several 
new infinite families of bent functions by calculating their duals. Second, from any quadratic idempotent bent function, we 
get infinite families of bent idempotents over F 2 2m of algebraic degree between 2 and m. To our knowledge, it is the first 
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univariate representation construction of infinite families of bent idempotents over F 2 2 m of algebraic degree between 2 and to, 
which solves the open problem proposed by Carlet 0 . Third, we present an infinite family of anti-self-dual bent functions 
over F 2 2 m of algebraic degree between 2 and m 1. If /i, / 2 , and fj, are anti-self-dual bent functions of this family, then 
/t + fi + fs is a lso anti-self-dual bent and belongs to this family. Hence, we solve the open problem proposed by Mesnager 

133). 

The rest of the paper is organized as follows: Section II introduces some basic notations and results on Boolean bent 
functions, bent idempotents, and self-dual bent functions (anti-self-dual bent functions). Section III, we present our concrete 
construction of several new infinite families of bent functions. Concretely, in Section IHI-AI a new infinite family of bent 
functions from Kasami bent functions is obtained, which gives an infinite family of bent idempotents and an infinite family of 
anti-self-dual bent functions. We obtain an infinite family of bent functions and bent idempotents from any quadratic idempotent 
bent function in Section 1III-B1 a new infinite family of bent functions from Gold-like monomial functions in Section IIII-CI a 
new infinite family of bent functions from Niho exponents in Section IIII-DI and a new infinite family of bent functions from 
the Maiorana-Mcfarland class of bent functions in Section IIII-EI Section IV makes a conclusion. 

II. Preliminaries 

Let n = 2to be a positive integer, F 2 2 m denote the finite field with 2 2m elements, and ¥^ 2m = F 2 2 m\{ 0 }. For any positive 
integer k\n, the trace function from F 2 « to F 2 t, denoted by TrJJ, is the mapping defined as : 

rr~i Tl ( \ . 2 fc I 2 2k I I 2 n ~ k 

Tr fc (x) = x + x + x H- + x 

When k = 1, Tr”(a;) = q x 2 ' is called the absolute trace function. The trace function satisfies that Tr"(x) = Tr"(a: 2 ) 
and Tr™(x) = TrJ(Tr£ (x)) for any integer k\n. Let Z be the integer set and F 2 [Xi,X 2 , • • • ,X T ] the multivariate polynomial 
ring with variables Xi , X 2 , • • • , X T for any positive integer r. 

A Boolean function f(x) defined on F 2 « is a mapping from F 2 «. to F 2 . Every nonzero f(x) has a unique univariate 
representation of the form 

2 n —I 

/ 0 ) = Y a i xJ - 
2=0 

where a o, a 2 ^-i £ F 2 and a, 2 j = a 2 , and j £ Z/(2 n —1)Z. The univariate representation can be written as a trace representation 
of the form 

f(x) = Y TV l (j) (cijX 3 ) + CL 2 ”--lX 2 ~ l 

oe r„ 

where 

• T„ is the set of integers obtained by choosing one element in each cyclotomic class of 2 modulo 2 " — 1 (j is often chosen 
as the smallest element in its cyclotomic class, called the coset leader of the class); 

• o(j) is the size of the cyclotomic coset of 2 modulo 2 " — 1 containing j; 

• a,j £ F 2 oO) ; 

• Q 2 n —i = 0 or 1 . 

We also have f{x) = Tr"(P(a;)) for some polynomial P(x), which is not a unique representation. 

Definition Let f{x) be a Boolean function defined on F 2 n. f(x) is called an idempotent if 

f(x ) = f(x 2 ),\/x £ F 2 n. 

Every x £ F 2 n has a unique representation x = Xl£i + X 2 C 2 + • • • + X n (, n , where X,; £ F 2 and Cr, ( 2 r'' : Cn is a 
basis of F 2 n over F 2 . Hence, x is denoted by a vector (Xi,X 2 , • • • ,X n ). A Boolean function f(x) can also be written as 
f(X \. A r 2 , • ■ • ,X n ) : ¥2 1 —> F 2 . A Boolean function defined over F 2 is often represented by the algebraic normal form 
(ANF): 

f{Xi,- ■ ■ , x n ) = Y, ai 6 F2 - (1 > 

7C{r,..,n} iel 

A polynomial in F 2 [Xi, X 2 , ■ • • , X n ] with the form in Equation ([TJ is called a reduced polynomial. 

The algebraic degree of a Boolean function / is the global degree of its algebraic normal form. And the algebraic degree 
of / can also be expressed as max{wt 2 {j) '■ a,j 7 ^ 0}, where u>t 2 (j) is the Hamming weight of the binary expression of j 
and a,j is in the trace representation or univariate representation of /. The following lemma is used to determine the algebraic 
degree of some Boolean functions. 

Lemma 2.1: Let r be a positive integer such that 1 < t < to, ui,u 2 , • • • ,u T £ F£ be linearly independent over F 2 , and 
F(X 1 , X 2 , • • • , X T ) be a reduced polynomial function in F 2 [A) , X->. • • ■ , X T \ of algebraic degree d. Then the function 

F(Tr"(wia;),Tr"(u 2 a;), • • • ,Tr"(rt T x)) 
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has algebraic degree d. 

Proof: Since Ui,U 2 , ■■■ ,u T are linearly independent, there exist u T + 1 , • • • , u n such that ui,« 2 , ■ ■ ■ ,u n form a basis of 
F 9 over F 2 . Thus, for any u G F g , there exists Ci G F 2 such that u = X)"=i c i u i- Define a mapping 

cr : F 2 n —> F£ 

x 1 —> (Xi,X 2 , ■ ■ ■ ,x n ), 

where Xi = Tr ™(uix). If there exists Xq G F g such that 

Tr'Kmxo) = Tr"(u 2 zo) = • • • = Tr” (u r x 0 ) = 0, 

then for any u G F g , Tr”(ita:o) = Y^h=\ Ci Tr" ( u i x o) = 0. Hence, Xo = 0. The defined mapping a is nondegenerated. 
F(Tr"(itix), Tr™(ii 2 x), ■ ■ ■ , Tr ™(u T x)) can be seen as a function F(Xi, X 2 , ■ ■ ■ ,X T ) over F^. The algebraic degree of 
a Boolean function under a nondegenerate mapping keeps unchanged. Hence, F(Tr"(iti:r), Tr”(u 2 x), ■ • ■ , Tr ™(u T x)) has 
algebraic degree d. ■ 

Definition A Boolean function or a multivariate polynomial f(X i,X 2 , • • • . X n ) is rotation symmetric if it is invariant under 
cyclic shift: 

f(X n ,X 1 ,X 2 ,--- ,X n _ 1 )=f(X 1 ,X 2 ,--- ,X n ) 

For a Boolean function f{x) and a normal basis { u , u 2 , ■ ■ • , u 2 } of F 2 n, the multivariate representation of f(x): 

n 

f(x 1 ,x 2 ,--. ,x n ) = fC£x i u 2i - 1 ) 

2=1 

is rotation symmetric if and only if f(x) is an idempotent. 

The bivariate representation is based on the identification F 2 2 m « F 2 ™ x F 2 m and has the form 

f( x ) = ^2 a i,j xl y j > a i,j € ^2 m 

0 <i,j<2 m -l 

The simple representation f(x,y) = Tr™ (P(x,y)) exists but not unique, where P(x,y) ia a polynomial over F 2 m. 

The Walsh transform of a Boolean function calculates the correlations between the function and linear Boolean functions. 
For the univariate trace representation over F 2 ™, the Walsh transform of / is 

W f (P) = E (-l) /(x)+TrWx) , /? G F 2 n. 

®eF 2 n 

For the bivariate trace representation over F 2 ™ x F 2 ™, the Walsh transform of / is 

W f ( 0 i,fo)= E (-l) /(x ’ y)+Trf(/3lX+fty) . 

X,y£W 2 m 

For the multivariate representation over F?J, the Walsh transform of / is 

Wf (V1,V2,— ,y n )= E (_1 )/(xi,x a ,...,x B )+Er =1 x iVij 

(xi,X2,-” ,Xn)£¥V; 

The inverse Walsh transform of f(x i,tc 2 , • • • ,x n ) is 

( _ 1) /(* 1 .* a .-,x«) = i. £ w( yi ,y 2 ,---,yu)(-i) Xiyi+X2V2+ -- +XnVn . 

Then (— ,x n ) can be expressed by the linear combination of (— \Y lVl+X2V2 ^ This representation is unique 

and is vital in this paper. And we rewrite this in the following lemma. 

Lemma 2.2: Let r be a positive integer and F(X i,X 2 , • • • , X T ) G F 2 [Xl, X 2 , • • • , X T ], There exists a unique set of c w G C 
satisfying that 

(_1 )F(Xi,X 3 ,-.,X t ) = c w (-l)£r=l 

w6FJ 

where w = (wi,w 2 , ■ ■ ■ ,w T ) G F£. 

Definition A Boolean function / is called a bent function if |W/(/3)| = 2"/ 2 for any /3 G F 2 n. If / is an idempotent, then / 
is called a bent idempotent or an idempotent bent function. 

Bent functions exist only for an even number of variables. For a bent function defined over F 2 », its dual is the Boolean function 
/ such that W/(/3) = 2"/ 2 (—1)W). The dual of a bent function is also bent. Thus, Boolean bent functions occur in pairs. 
Determining the dual of a bent function is difficult. A bent function is called self-dual (resp. anti-self-dual) if / = / (resp. 
/ = / + !)• 
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III. Several new infinite families of bent functions and bent idempotents 

In this section, we generalize the construction of infinite families of bent functions by Mesnager ff33l and Xu et al. l42l and 
construct several new infinite families of bent functions and bent idempotents from some known bent functions. 

Let n = 2m, g(x) be a Boolean bent function over F22m, r be a positive integer such that 1 < r < m, X\, X 2 , • • • , X T be 
r variables, and F(X 1, X2, • • • , X T ) G F2IA1, X- 2 , ■ ■ ■ , X T }. We will study Boolean functions over F 2 2m of the form 


f(x ) = g(x) + F(Tr”(uiz),Tr"(M 2 £), • • • , Tr”(u T x)), 


where m G F^™- 

From Lemma [2T2l as a function from F£ to the complex field C, (—l) F ( Al X 2 ,-" ,x r ) ^ as t jj e un jq ue Fourier expansion, i.e., 
there exists a unique set of c w G C such that 


( _ 1) F(A- 1 ,A' 2 ,...,A T ) = £ c w( —!) 


WiXi+W 2 X 2 J l - \-w T X T 


( 2 ) 


wGFJ 


where w = {w\,W 2 , • ■ ■ ,ui T ) G F£. Equation Q holds for any Xi,X 2 , ■ ■ ■ ,X T G F 2 . In particular, take X\ = Tr"(t/itc), 
X 2 = Tr™((i 2 ®), ■ ■ ■, X T = TV" (u T x). Then for any x G F 2 2 m, we have 

^_^^F(TrJ(iiix),TrJ(ii 2 2 :),---,TrJ(u T a:)) _ ^ Cw (—1 WiUi)x) _ 

wGFI 


(3) 


Multiplying both sides of Equation ([3]) by (—l)s( ;c )+ Tr T'(/3®) ; we have 

^ 1 y(x)+F(Tr^(u 1 x),Tr-(u 2 x),- -,Tr-(u T x))+Tr-(fix) _ ((/ 3 +I 3 I = i 


i)x) 


wGFJ 


Further, we have 


Y (_iy(x)+F(Tr"(u 1 x),Tr"(u 2 x),.--,Tr”(u T x))+Tr'l(Px) = ^ C w W ff (/3 + Y Wm), 
x£Fr, 2 m w£FI 2—1 


i.e., 

r 

W/(/3) = Y C w Wg(P + Y W i U i)- 

WEF^ 2=1 

Let g(x) be the dual of g{x). Then 

W f (/3) = 2 m Y (4) 

wGFJ 

For different bent functions g{x), we compute W/(/3) and construct new infinite families of bent functions. 


A. New bent functions from Kasami functions 

Let n = 2m (to > 2). The Kasami function Il33l is a bent function of the form g(x) = Tr™(Ax 2m+1 ). And its dual is 
< 7 ( 2 ) = Tr™(A _ 1 2 2 +1 ) + 1. Then we will characterize the bentness of functions of the form 

f(x)=TrT(Xx 2m + 1 ) + F(Tr^(u 1 x),Tr^(u 2 x),--- ,Tr ?(« T ar)), (5) 


where u, G F* 2m and F(X 1, X2, • • • ,X T ) is a reduced polynomial. In the following theorem, we present a construction of a 
new family of bent functions from the Kasami functions and compute their duals. 

Theorem 3.1: Let n = 2 to, r be a positive integer such that 1 < r < to, A G F^m, and ui,U 2 ,--- ,u T G F 2 **. If 
Tr"(A _1 u 2 Uj) = 0 for any 1 < i < j < t, the function defined in Equation ((5]) is bent and its dual is 

f(x) = Tif(\x 2m+1 ) + F(X t , X 2 , ■ ■ ■ , X T ) + 1, 


where X* = Tr™(A 1 ( 2 2 ’"m + xu 2 ™ + u 2 +1 )). 

Proof: From Equation (|4j. 


W 7 (/ 3 )= 2 m Y c w (-l) Trr(A 1(/3+EI=1 ^«*) 2m+1 )+t 


wGFI 


= - 2 m ^ C w (-1) 


Tr^CA^(/J+ELi w i u i ) 2m+1 ) 


wgf ; 
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From properties of the trace function, 

r r 

Trr(A + Y, w 'Ui) 2m+1 ) =Trr(A-^ 2m+1 ) + ^m t Tri n (A- 1 (/3 2 "‘ Ul +K m +«f +1 )) 

2—1 2=1 

+ ^2 WiWjTr^ l (X~ 1 (uf n uj + UiV?™))- 

l<2<j<r 


From Tr?(A 1 u 2 uf) = Tr™(A(u 2 Uj + UiU 2 )) = 0, 


Ti'™(A -1 (/3 + £ w iUi ) 2m+1 ) = Tr™(A- 1 /f 2m+1 ) + £ Wi X u 


2=1 
2 m + l \ 


2=1 


where X{ = Tr™(A 1 (/3 2 Ui + (3u 2 + iq + )). From Equation ©, we have 

W/03) = -2 m (—i)^r(A^ 2m+1 ) ^ Cw (_i)EU 


wGFI 


From Equation ©, 

Wf(P) = -2 m (-l) Tr ^^ 2m+1 \-l) F{Xl ’ X2 ’''' = 2 m (-l) Tr T(^ 2m+1 )+F(x 1 ,x 2 ,-,x T )+i_ 


Hence, f(x) is bent and its dual is 

f(x) = Tr™(Aa: 2m+1 ) + F(X x , X 2 , ■■■,X T ) + 1, 

where X t = Tr™(A -1 (x 2 ” 1 m + xiif" + u 2 +1 )). ■ 

Corollary 3.2: Let n = 2m, r be a positive integer such that 1 < r < m, A, ui,u 2 , • • ■ ,u T G Fj™, and F(X i, X 2 , ■ ■ • , X T ) 
be a reduced polynomial in F 2 [Afi, X 2 , ■ ■ • , X~\ of algebraic degree d, where ui, u 2 , ■ ■ ■ ,u T are linearly independent over F 2 . 
Then the function f(x) defined in Equation (0 is bent and its dual is 

f(x) = Tr™(A- 1 a: 2m+1 )+F 1 (Tr”(A- 1 Mia;)+Tr™(A- 1 ^),Tr”(A- 1 zi 2 ®)+Tr™(A- 1 ^), • • • , Tr?(A“ V^+Tr^A'^Hl. 


If d > 2 , then f(x) is a bent function of algebraic degree d. 

Proof: Note that Uj G F 2 ™. and Tr"(Au 2 m it^) = Tr”(A'u,;Mj) = 0. From Theorem 13. II f{x) is a bent function. Note that 
Tr"(A - 1 zi 2 m ;r) = Tr?(A _ 1 Ui:c) and Tr?(A _ 1 zt 2 +1 ) = Tr?(A _ 1 zt 2 ). From Theorem 13.II we have 

f{x) =Tr™(\- 1 x 2 m+ 1 )+F(Tr 7 {(\- 1 u 1 x)+Ti-™(\- 1 u 2 ),Ti 7 {{\- 1 u 2 x)+Tr™(\- 1 u 2 2 ),--- , TV^A-^^+TV^A" V))+l. 

The algebraic degree of F(Xi, X 2 , ■ ■ ■ ,X T ) is d and the algebraic degree of Tr™(A - 1 a ; 2 +1 ) is 2. If d > 2, from Lemma 
EH the algebraic degree of f(x) is d. 

Hence, this corollary follows. ■ 

Theorem 3.3: Let n = 2to, u be a normal element of F^*, and F(X\, X 2 , ■ ■ ■ , X m ) be a reduced rotation symmetric 
polynomial in F 2 [Xi,X 2 , • • • . X rn ] of algebraic degree d. Then the function 

f(x) = Tr™(x 2m+1 ) + F( Tr?(u*), TV?( U 2 z), • • • , TV? (u 2 ^ 1 x)) 


is a bent idempotent. And its dual 

J{x) = TrrOr 2m+1 ) + F(TV?(uz) + 1, Tr?(n 2 x) + 1, • • • , TV?^ 2 "* - ^) + 1) + 1 

is also a bent idempotent. If d > 2, /( x) is a bent idempotent of algebraic degree d. 

Proof: Since u is a normal element of F 2 m, then u,u 2 , ■ ■ ■ ,u 2 is a basis of F 2 *n over F 2 and Tr™ (u) = 1. From 
Corollary 13.21 f(x) is a bent function and f(x) is also bent. From the rotation symmetric property of F(Xi,X 2 , ■ ■ ■ , X T ), 

f{x 2 ) =Tr™(a; 2(2m+1) ) + F(Tr?(m- 2 ) + 1, Tr?( U 2 a; 2 ) + 1, • • • , T^u 2 ” -1 ® 2 ) + 1) 

=Tr™(a: 2m+1 ) + F(TV?(u 2n_1 x) + l,Tr ^(u 2 n x 2 ) + 1, • • • , Tr™{u 2 m+rl ~ 2 x) + 1) 

=Tr™(a; 2m+1 ) +F(Tr?(w 2m_1 a;) + l,Tr?(wa; 2 ) + 1, ■ • ■ , Tr?(tt 2m_2 a;) + 1) 

=Ti™(x 2m+1 ) + F(T^{ux) + 1, Tr?( U 2 cc) + 1, • • • , Tr^u^x) + 1) 

=f{x)- 

Similarly, f(x 2 ) = f(x). f(x) and f(x) are both idempotents. If d > 2 , from Lemma EU then f(x) is a bent idempotent of 
algebraic degree d. 

Hence, this theorem follows. ■ 
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Corollary 3.4: Let n = 2m, u be a normal element of F 2 ™, 
function 


and d be a positive integer such that 2 < d < m. Then the 

d 


/Or) = Tr7V m+1 ) + E n^*)) 

0 < 2 l< 22 <-"<*d<^— 1 J = 1 


is a bent idempotent of algebraic degree d. 

Proof: From Theorem 13.31 we just take F(Xi, X 2 , - • • ,X m ) as the d-th elementary symmetric polynomial and obtain 
this corollary. ■ 

Corollary 3.5: Let n = 2m, A £ F^™, ui,u 2 ,--- ,u m be a basis of F 2 m over F 2 , F(X\, X 2 , ■ ■ • ,X m ) be a reduced 
polynomial in F 2 [Xi, X 2 , ■ ■ ■ . X rn ] of algebaric degree d. Then the function 

fix) = Tr™(Ax 2 +1 ) + F(Tr" {u\x), Tr"(u 2 a;), ■ • ■ , Tr”(u m x)) 


is bent and its dual is 


fix) =Tr™{\- 1 x 2 m+ 1 )+F{Tr r l(\- 1 u 1 x)+TY?(\- 1 ul),TT r l(\- 1 U2x)+Ti?{\- 1 u 2 2),--- ,Tr r HX- 1 u m x)+TY™iX- 1 u 2 m ))+l. 


If d > 2 , then fix) is a bent function of algebraic degree d. 

Proof: From Corollary 13.21 and r = m, this corollary follows. ■ 

Corollary 3.6: Let n = 2m, r be a positive integer such that 2 < t < m, and X,u\,u 2 , - • • . u T £ Fj™, where Ui are 
linearly independent over F 2 . Then the function 

r 

f(x) = Trf(Ax 2 +1 ) + (mx) 

i =1 

is bent of algebraic degree r and its dual is 

r 

f(x) = Tr r f(X~ 1 x 2m+1 ) + [](TrZ(A-W) + TXf {X~ x u 2 )) + 1. 

i =1 

Proof: From Corollary 13.21 this corollary follows. ■ 

Let To = {x £ F 2 rn ■ Trj™(a;) = 0}. Then the dimension of Tq over F 2 is — 1. The following corollary gives a class of 
self-dual bent functions. 

Corollary 3.7: Let n = 2m, u\,U 2 , ■ • • , u m -1 be a basis of To over F 2 , and F(X 1 , X 2 , • • • , X m -i) be a reduced polynomial 
in ¥ 2 [Xi, X 2 , ■ ■ ■ ,X m _i] of algebraic degree d. Then the function 

f{x)=TrT(x 2m+1 ) + F(TvUuix),TvUu 2 x),--- ,Tr?(«„_!*)) 


is anti-self-dual bent. And its dual is 

/(*) = TrT(x 2 +1 ) + F(Tr”(uia;),Tr”(u 2 a;), • • • ,Tr"(u m _ia;)) + 1. 

If d > 2, then fix) is an anti-self-dual bent function of algebraic degree d. 

Proof: Since Ui £ Tq, then Tr™ (uf) = Trj" (u,) = 0. From Corollary 13.21 this corollary follows. ■ 

Remark Let m,U 2 , ■ • • , u m _i be a basis of To over F 2 . Take three reduced polynomials Tj(Ai, •• • , X m _i), • • • ,X m -i), 

and F 3 (X ir ■ ■ , X m _i). From Corollary 13.71 the three functions 

fi(x) = Tr™(a; 2m+1 ) + Fi(Tr"(itia;), Tr”(u 2 a;), ■ • • , Tr"(u m _ia:)), 
f 2 {x) = Tr™ {x 2 +1 ) + F 2 (Tr"(uia:), Tr"(u 2 a;), • ■ • , Tr”(u ro _ia:)), 
f 3 {x) =Tr™(x 2 +1 ) +F 3 (Tr"(itia:),Tr”(u 2 a;),--- ,Tr”(u ro _ia:)) 

are anti-self-dual bent functions. From Corollary 13.71 /1 + / 2 + f 3 is also anti-self-dual bent. This solves the open problem 
proposed by Mesnager l33l . 


B. New bent functions and bent idempotents from quadratic bent idempotents 
Let ij(x) be a quadratic idempotent bent function of the form 

m— 1 

d( x ) = ^2 c i Tr i (^ 2 ' +1 ) + c m Tr™(z 2m+1 ) + e, (6) 

i =0 

where e £ F 2 and Cj £ F 2 {i = 0,1, • , m). The dual of a quadratic bent function is also a quadratic bent function. Let g{x) 

be the dual of g{x). The following lemma shows that if g(x) is idempotent, then g(x) is also idempotent. 

Lemma 3.8: Let g(x) be a bent idempotent. Then g{x) is also a bent idempotent. 
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Proof: The Walsh transform of g is 


WgU3) = E (-l) 9(x)+Tr;>(/3x) 
a:GFq 

= ^ ^_1)S(^ 2 )+Tr" (fix 2 ) 


X£F q 


= E (- 1 ) s0 


: )+Tr?(/3 2 " *x) 


X£F q 


Then W g (/3) = W g (/3 2 " ) for any /3. Hence, W g (/3 2 ) = W g ((/3 2 ) 2 " ) = W g (/3). Since g(at) is bent, then 

2 m (^i)s(/ 32 ) = 2 m (—1)®W, 

i.e., g(fi 2 ) = g(/3). Hence, g(at) is also idempotent bent. 

From Lemma 13.81 we have 

m— 1 

g(x) = ^ CiTri(x 2l+1 ) + c m Trf(x 2m+1 ) + e. 
i =o 

In this subsection, we consider functions of the form 


f{x) = g(x) + F(Tr^(uix), Tr"(u 2 a;), • • • , Tr”(zz T at)), (7) 

where g{x) is defined in Equation (| 6 }, r is a positive integer such that 1 < r < m, u\, U 2 , • • • , u T G F^m, and F(X i, A 2 , • • • , AT r ) 
is a reduced polynomial in F 2 [Xi, A^, • • • ,X T ]. 

Theorem 3.9: Let n = 2m, r be a positive integer such that 1 < t < m, g(x) be quadratic idempotent bent of the form 
©, zti, u- 2 , • • • , u T £ F 2 m, and F(Xi, X 2 , ■ ■ ■ , X T ) be a reduced polynomial in F 2 [Xi, A' 2 , • • • , X T ], Then the function /( x) 
defined in Equation ([7} is bent. 

Proof: From Equation {Q}, 

W/(/3) = 2 m E c w (- i)»w+e::=i 

weFj 


When u £ F 2 ™, we have Tr”((/3 + zz) 2 ’ +1 ) = Tr"(/3 2 ’ +1 ) + Tr"((/3 2 ’ + /3 2 " ')u) and Tr™((/3 + u) 2 ™ +1 ) = Tr™(/3 2m+1 ) + 
Ti™((/3 2m + (3 + l)u). Let u = J2i =1 WjUj. Then 

r 

g(P + u ) = <?(/?) + E 

Z =1 

where A/ = Tr”(uj c g (/3 2J +/3 2 " ')) + Tr™(zz m (/3 2T " + /3 + 1)). Then 


From Equation (0. 


Wf{/3) = 2 m (-l) 5(/3) E c w (-l)^=i WiXi . 

wGFJ 

= 2 m (— iy(^) + F ( X l, X 2,--- ,-W)_ 


Hence, /(at) is bent. ■ 

Theorem 3.10: Let n = 2m, g{x) be quadratic idempotent bent of the form (( 6 )). u be a normal element of Fa™, and 
F(A'i, X2, ■ ■ ■ ,X m ) be a reduced polynomial of algebraic degree d in FafA]. X 2 . ■ ■ ■ , X m ], Then the function 

f(x)=g(x) + F(Tr^(ux),Tr^(u 2 x),--- , Tr? {u^x)), 


is always bent. Further, if F(Xi, X 2 , ■ ■ ■ , X rn ) is rotation symmetric, then fix) is a bent idempotent. And when d> 2 , /(at) 
is a bent idempotent of algebraic degree d. 

Proof: From Theorem l3.9l /(at) is bent. Since u is a normal element of F 2 ™ and F(Ai, X 2 , • • • , X m ) is rotation symmetric, 
we can verify that 

/(at 2 ) = /(at). 

Hence, / is idempotent. When d> 2, from Lemma 12711 the algebraic degree of /(at) is d. ■ 

Remark The quadratic idempotent bent function g{ at) is required in the construction. Ma et al. l26l proved that g(x') is bent 
if and only if gcd(fff™= 1 Ci(A' I + A rl_l ) + c Tra A' m ,X I1 + l) = 1. This condition is equivalent to that the linearized polynomial 
L( at) = c i{x 2 ' + x 2 " ’) + c m x 2 " 1 is a permutation polynomial (a necessary condition is that L{ 1) ^ 0 , i.e., c m = 1). 
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If n is a power of 2, then according to |4T| [Proposition 3.1], g{x) is bent if and only if c m = 1. For any c* £ F 2 and 
rotation symmetric polynomial F(Xi,X 2 , ■ ■ ■ , X n ), the function in Theorem 13. 101 of the form 

m —1 

/Or) = Y CiTr™(x 2 * +1 ) + Ti-™(x 2m+1 ) + F(Tr?(ux), Tr?( U 2 x), • • ■ , Tr ^u 2 ™^x)) 

i =1 


is always idempotent bent. 

Note that more results, valid for more general values of n, can be found in |[43l . 


C. New bent functions from Gold-like monomial functions 

Mesnager l33l showed that the monomial function g(x) = Tr^ fc (Ax 2fc+1 ) over F 2 4 k is self-dual bent, i.e., for any /3 £ F 2 4 it, 
the dual g(/3) = Trf k (Xx 2 +1 ), where A + A 23 = 1. 

In the following theorem, we present a construction of a new family of bent functions from the Gold-like monomial function 
and compute their duals. 

Theorem 3.11: Let n = 4 k, k be positive integers, r be a positive integer such that 1 < r < 2k, A £ F 2 4 & such that A+A 2 = 
1, u\,U 2 i--- ,u T £ F* 4fc , and F{Xi,X 2 ,--- ,X T ) be a reduced polynomial in F 2 [Xl,X 2 , • • • ,X T \. If Tr^ fc (A(w 2 Uj + 
UiU 2 )) = 0 for any 1 < * < j < r, then the function f(x) 

f(x) = Trf (Ax 2 " +1 ) + F {Trf ( Ul x),Trf ( U 2 x), • • • ,Trf (u T x)) 


is bent. 

Proof: From Equation (|4j. 


Note that 


W/(/3) = 2 2k J2 Cw(-i)^'W+£’ =I ^) 2 


wGF^ 


Trf(AC d+Y.WiUi ) 2 +1 ) =Trf (A /? 2 +1 ) + ^tr.Trf (\(f3 2 Ul + f3u 2 + u 2 +1 ))+ Y u^TVf (X(u 2k Uj + Ui u 2 )). 


i =1 


i= 1 

From Trf k (X(u 2k Uj + utuf )) = 0, 

W f (/3) = 2 2fe (-l)^ ( ^ 2fc+1 ) Y, Cw(-1) E *=^‘ 

where Xi = Trp(A (p 2 * Ui + fiuf + u 2 +1 )). From Equation (0, 

y\l f (j3) = 2 2fc (-l) Tr ^ (A^ 2fc+I )+F(x I ,x 2 ,-,x T )_ 


Hence, f(x) is bent and its dual is 

/Or) = Trf (Ax 2fc+1 ) + F{X U X 2 , • • • ,X T ), 
where X t = Tr^ fe (A(x 2 ^.; + xuf + u 2 +1 )). 


D. New bent functions from Niho exponents 

Leander and Kholosha [241 introduced a class of bent functions of the form 

2 fc-i_i 

g(x) =Tr™(x 2m+1 ) + Tri l ( Y x (2 ’"- 1)i / 2 ' C+1 ), 

2 — 1 

where (&, m) = 1. Its dual H] is 

g{x) = Tr?((aA + x 2 "“ + a^^A 1 ^ 1 ), 
where a + a 2 ™ = 1 and A = 1 + x + x 2 ™. 

In the following theorem, we present a construction of a new family of bent functions from the Niho exponents and compute 
their duals. 

Theorem 3.12: Let n = 2m, k be a positive integer satisfying (, k,m ) = 1, r be a positive integer such that 1 < r < m, 
U\,U 2 , • • • , u T £ F 2m , and F(Xi,X 2 , • • • , X T ) be a reduced polynomial in F 2 [Xl, X 2 , • • • , X T ], Then the function 

2 fc—1 —1 

f{x) = Tr™(x 2m+1 ) + Tr”( Y x( 2 ” , - 1 W 2 ' s + 1 

2=1 


) + F(Tr"(uix),Tr"(u 2 x), • • • ,Tr”(u T x)) 
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is bent. 

Proof: Note that 

r r 

1 + (/3 + 'y ' Wiiif) + (/3 + ^ WiUi ) 2 = 1 + /3 + /3 2 . 

i=l z—l 

From the dual < 7 (a;), 

r r 

<7(/3 + ^ WjMj) = ff(/3) + y^WjTr™(^A 1/2 ), 

2—1 2=1 

where A = 1 + /3 + Z? 2 ™. From Equation ©, we have 

W/(/3) = 2 m (-l)^ ^ cw(- 

wGFJ 

where X, = Tr™(ujA 1,/2 ). From Equation (0, 

Wf(/3) = 2 m (-i)9(/ 3 )+ F ^ i - Y 2 ,-x T )_ 

Hence, /(x) is bent and its dual is 

f(x) = g(x) + FiTrTi^A 1 ^- 1 ), TtT^A 1 ^ 1 ), • • • ,Tr^KA 1 / 2 * -1 )), 

where A = 1 + x + x 2 . ■ 

Corollary 3.13: Let n = 2m, k be a positive integer satisfying (k, m) = 1, u be a normal element of F 2 ™, and F(Xi,X 2 , • ,X m ) 
be a reduced polynomial in F 2 \X- t . X- 2 , • • ■ , X m ], Then the function 

f{x)= Tr^{x 2m+1 ) + Tr^( ^ x ( 2 m ~W 2 "+ 1 ) + ^(Tr^ux), TV^ 1 (w 2 x), • • • , TV^u 2 ” 1 '^)) 

2=1 

is bent. Further, if F{X\. X 2 , ■ ■ ■ ,X m ) is rotation symmetric, /(x) is a bent idempotent. 

Proof: From Theorem 13. 121 /(x) is bent. From a similar proof of Theorem 13.31 we have /(x 2 ) = /(x). Hence, /(x) is 
a bent idempotent. ■ 


E. New bent functions from the Maiorana-McFarland class of bent functions 

The Maiorana-McFarland class of bent functions are defined over F 2 m x F 2 m of the form 


g(x,y) = Tr^(x7r(y)) + h{y), 

where 7 r : F 2 ™. — > F 2 m is a permutation and h is a Boolean function over F 2 m. Its Walsh transform is 

Wgtfufo) = 2 m (-l . 

And its dual GO is 

g(x,y) = Tr™(?/7r _1 (x)) + /i(tt -1 (x)). 

In the following theorem, we present a construction of a new family of bent functions from the Maiorana-McFarland class 
of bent functions and compute their duals. 

Theorem 3.14: Let n = 2m, r be a positive integer such that 1 < t < m, Ui = G F 2 ™ x F 2 ™ (1 < * < r) be 

linearly independent over F 2 , 7 r be a linear permutation polynomial over F 2 m, and F(X 1 , A' 2 , • • • , X T ) be a reduced polynomial 
in F 2 [Xi,X 2 , • • ■ , X T \. If Tr™(u^ 2 V _ 1 (it^ 1 '*) + uj 2 V _ 1 (u^)) = 0 for any 1 < i < j < t Then the function 

/(x, y) = Ti?(xTrfo)) + Tr ?{by) + F(Trf (u^x + u^y), TrT(u^x + u^y), • • • , Tr? ( U «x + u^y)) 


is bent. 

Proof: Note that 


g(Pl + #2 + WiU i ) = giPl’fo) +'52 W iXi+ WiWjTr™(u\ 2) T 1 (uf ) )+uf ) T 1 (u- 1) )), 

2=1 2=1 2=1 l<i<j<T 

where X t = Tr™((/3 2 + b)tt~ 1 {u^) + w- 2) r _1 (^i) + u- 2 V _1 (u^)). From Tr™(u- 2 V _1 (u^) + u^ 2 V _1 (u^)) = 0 and 

Equation 0, we have 

W f (p) = 2 Tn (-l)®<*' ftl > Cw(-l) Er = 1,UiXi . 

wGFI 
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From Equation (Q}. 


Wf(/3) = 2 m (—l) 9 ^ 1 ’^ 2 ' >+F ^ Xl ’ X2 ’'"’ x ' r ' > . 


Hence, f(x) is bent and its dual is 


f(x,y) = TvTiyir-Hx)) + Tv™ (bn- 1 (x)) + F(X 1 ,X 2 , • • • ,X T ), 

where Xi = Tr ?((y+ b)n- 1 (u\ 1 ' > ) + uf\~ 1 (x) + uf'\~ 1 {u^)). ■ 

Theorem 3.15: Let n = 2m, s be a divisor of m such that ^ is odd, r be a positive integer such that 1 < r < to, 
Ui = {uf\ uf^) € F 2 S x F 2 * (1 < i < t) be linearly independent over F 2 , and F(X i,X 2 , • • • , X T ) be a reduced polynomial 
in F 2 [A'i,X 2 , • • ■ ,X T ], where for any 1 < i,j < r, = 0 and Tv™ {{uf^ ) 2 u' 2 ' 1 + uf\uf' > ) 2 = 0. Then the 

function 


f(x, y) = Tv™(xy d ) + F(Tr™ (u[ 1] x + uf ] y), Tr ™{uf\ + uf ] y), • • • , Tr^u^a; + u^y)) 


is bent, where d( 2 s + 1 ) = 1 mod 2 m — 1 . 

Proof: Take n (y) = y d . From d(2 s + 1) = 1 mod 2 m — 1, 

g{pv,p2) = Tv?{p 2 pl° +l ). 

From u^\ eF 2 », 


9(P 1 +^WiM- 1) ,/3 2 + '^2wiUf ) ) =Tv™(/ 3 2 Pl’ +1 ) + ^2,WiX, 


+ ^TvTiWr + Pi)( u f )u j 1] + u f ) Ui 1) ) + u- 2 ) (wf } ) 2 + uf\uf ] ) 2 ), 


where X t = Tv™(fif + 1 u\ 2 ^ + fciPT + Piu^ + (u\^) 2 ) + u[ 2 \/3f + /3iu^ + (u^) 2 )). From uf ' 1 uf 1 +uf ' 1 = 0, 

Ti-™(m- 2 ^(m ^) 2 + w- 2 ) K- 1} ) 2 ) = 0, and Equation (@]), 


From Equation ©. 


Hence, f(x) is bent. 


W/(/ 3) = 2 m {-l) 9 ^^ J2 c w (-l)^=i^-A 

weFj 

Wy(/3) = 2 m (—l) 9 ^ 1 ’^ +F ^ Xl ’ X2 ’"' x ' r \ 


IV. Conclusion 

In this paper, we generalize previous work on the constructions of infinite families of bent functions |33l , ll42ll and construct 
several infinite families of bent functions from known bent functions (the Kasami functions, quadratic idempotent bent functions, 
bent functions via Niho exponents, the Gold-like monomial functions, and the Maiorana-McFarland class of bent functions). 
These bent functions contain some previous bent functions by Mesnager ll33l and Xu et al. f42l . Further, several infinite 
families of bent idempotents of any possible algebraic degree are obtained from any quadratic bent idempotent, which solves 
the open problem proposed by Carlet 0 . And an infinite family of anti-self-dual bent functions are constructed. Take three 
anti-self-dual bent functions / 1 , f 2 , and fs in such a family, then fi + f 2 + fz belongs to this family, i.e., fi + f 2 + fz is 
anti-self-dual bent. This solves the open problem proposed by Mesnager [33j. 
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